Take-Two Goes After Microsoft, Discord in New Legal Action

Grand Theft Auto 6 publisher Take-Two Interactive is officially going after the leaker behind gameplay clips of Rockstar Games’ upcoming open-world game. On Thursday, Take-Two Interactive issued subpoenas in federal court to Microsoft and Discord in an attempt to obtain information about Cyberleek, the hacker behind the recent GTA 6 leaks.

Take-Two is using the Digital Millennium Copyright Act (DMCA) to root out Cyberleek’s identifying information on Discord, GitHub, and any connections to services like OneDrive, Google, and Xbox accounts. Take-Two believes it has identified a variety of Discord handles for Cyberleek (e.g., CYBERLEEK, CINEMATICROCKSTAR) and servers (e.g., Ødyssey.gg) where the hacker operated.

From Discord, Take-Two requested via subpoena:

All identifying information associated with all user accounts that are/were members of the Discord community servers and channels listed below during the time period from June 1, 2026 to present. For each returned account, provide the following: backend server metadata or telemetry records, original message logs, IP access logs, email addresses, phone numbers, connected accounts, registration timestamps, linked connections (Google/Xbox/etc.), and any associated device identifiers (MachineGuid/MSA).

And from Microsoft, which owns GitHub and Xbox:

All internal Microsoft business records and investigative records associated with Microsoft’s internal investigation of the “cyberleek” persona sufficient to identify the user(s), person(s) and/or entity/ies associated with that persona.

Show More

All identifying information associated with all user accounts that are/were members communicating with the Discord server(s) listed below during the time period from June 1, 2026 to present; and for those accounts, provide any associated device/telemetry records where one or more of the tool/file artifacts below were present on the system. For each returned account, provide: the account ID, registration email, registration and last-login IP addresses, phone number, linked connections (Google/Xbox/etc.), any associated device identifiers (MachineGuid/MSA), and content related to Grand Theft Auto (“GTA”), Rockstar or Cyberleek from their OneDrive account.

Both companies are commanded to deliver the requested files and documents before Sept. 4 at 10 a.m. EDT. Kotaku first reported the news of Take-Two’s legal action.

Image: Rockstar Games

Take-Two’s been hard at work this week trying to take down as many leaks as possible. Despite accounts and videos from Cyberleek being deleted across several websites, the hacker’s threat to release more GTA 6 leaks continues.

Armchair detectives in the GTA community also got to work this week, trying to find out more information about who could be behind the Cyberleek persona. During their investigation, they dug into the leakers’ cryptocurrency ties, which allegedly made them over $30,000 in trading fees within 24 hours of the first set of leaks.

The GTA 6 leakers have thus far released a variety of unofficial gameplay clips featuring one of the game’s protagonists, Jason, engaging in the typical Grand Theft Auto brand of mayhem. The hackers say they’re targeting Rockstar over a series of grievances, including Grand Theft Auto 6‘s digital-only release.

GTA fans will get an official extended look at Grand Theft Auto 6 on Aug. 27, when Rockstar Games and Netflix release a long-awaited preview of the game.

Grand Theft Auto 6 is coming to PlayStation 5 and Xbox Series X on Nov. 19.